At Konfir, data security is our top priority. We use best-in-class security measures to ensure your information is safe and protected.
What makes Konfir secure?
Data minimisation: We only request the data required for your verification.
No ongoing access: We use one-time access requests, which means we do not maintain any continuous access to your accounts. Once your verification is complete, our access is immediately closed.
Read-only access: Konfir has no ability to make changes to your accounts, only read certain data with your consent.
Consent-driven: Every step of a Konfir verification is powered by you providing authorisation/consent first. Nothing will be shared without your consent
How we secure your data
Banking security: We use the UK’s Open Banking system, which is underpinned by strong security measures implemented by your bank and regulated by the UK Government’s Financial Conduct Authority (FCA)
Payroll security: Your data is securely shared through Application Programming Interfaces (APIs) connected to your employer’s payroll/HR system. Our payroll partners are subject to regulation and oversight.
HMRC security: Data is accessed from your Government Gateway account, under your control, and with your consent via APIs provided by HMRC.
Platform security: Konfir's platform is hosted on Amazon Web Services (AWS), known for its world-class infrastructure security.
Compliance and Certifications
Fully GDPR compliant
ISO 27001 certified
Registered as an Attribute Service Provider under the UK Government Digital Identity and Attributes Trust Framework
🤔 Still unsure?: If you have any questions or concerns about security, feel free to contact our support team at [email protected].